Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/pLCrieOXVFslzA6OPOJHCOizaN0.roa
File: pLCrieOXVFslzA6OPOJHCOizaN0.roa (raw, json)
Hash identifier: EGHD3PwadbDgmlRuxgPUrsW/xWbWJVNW6p4EMQYTEkw=
Subject key identifier: A4:B0:AB:89:E3:97:54:5B:25:CC:0E:8E:3C:E2:47:08:E8:B3:68:DD
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 140E34BC
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/pLCrieOXVFslzA6OPOJHCOizaN0.roa
Signing time: Sat 01 Jan 2022 06:53:01 +0000
ROA not before: Sat 01 Jan 2022 06:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51324
IP address blocks: 185.80.144.0/22 maxlen: 24
2a05:7dc2:1000::/36 maxlen: 36
2a05:7dc2:3000::/36 maxlen: 36
2a05:7dc2:4000::/36 maxlen: 36
2a05:7dc2:5000::/36 maxlen: 36
2a05:7dc2:6000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336475324 (0x140e34bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jan 1 06:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4b0ab89e397545b25cc0e8e3ce24708e8b368dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:b0:ce:01:dd:b9:38:13:22:87:a7:2d:9b:
81:2e:da:fa:30:c5:2d:6c:36:bd:6b:2d:cb:13:19:
ed:45:e9:11:aa:c6:f5:15:e9:d5:ba:ba:6c:23:fa:
b0:6b:43:6c:07:73:f9:45:70:9b:6e:95:8f:94:8f:
60:a1:c3:3b:e3:be:b9:ac:94:51:3f:ab:ff:46:83:
a3:6f:b6:a9:e8:0f:8d:f1:b8:15:63:fb:f1:54:dc:
d6:6f:7f:ae:cc:94:8d:ae:71:99:e7:6e:2e:41:8f:
d5:7f:98:e7:51:50:bf:19:51:a2:1d:2d:8c:7f:b1:
b6:ce:e9:56:d6:ab:e3:d3:ae:38:14:60:d2:44:6a:
02:b6:15:ef:10:82:a2:c5:9f:95:b2:a2:7a:cc:13:
2e:39:50:23:cd:11:20:2d:5e:18:b1:9c:e6:6b:f6:
8f:5c:1f:58:eb:c1:8f:cc:dc:e9:b2:ab:88:e5:41:
8e:06:ff:84:a7:31:df:43:b1:4d:34:06:b2:08:33:
f9:59:02:3e:51:c0:5d:84:f6:2d:b2:ab:e6:f9:2d:
8f:56:1f:8f:6a:0d:4c:60:0b:80:20:6e:80:77:fc:
3c:10:3b:c8:13:d3:fa:76:0d:30:6f:26:55:90:38:
ee:aa:88:62:89:85:b2:de:40:d7:7c:d4:cc:b6:9e:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:AB:89:E3:97:54:5B:25:CC:0E:8E:3C:E2:47:08:E8:B3:68:DD
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/pLCrieOXVFslzA6OPOJHCOizaN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.144.0/22
IPv6:
2a05:7dc2:1000::/36
2a05:7dc2:3000::-2a05:7dc2:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:05:b3:41:a9:e6:5d:86:18:67:a2:01:d0:81:80:ea:b8:6b:
09:f4:b6:6f:7c:4d:0e:54:15:93:54:3f:a0:0c:bd:dd:b0:ea:
f5:d2:7d:b0:74:ac:9f:ec:49:51:c7:c9:19:c8:c4:ee:be:a2:
07:f5:37:c2:6d:d0:77:b5:4d:ff:d3:0f:ba:f2:6a:85:41:06:
e3:8f:18:c2:6f:21:79:fa:46:94:90:eb:01:ae:69:41:bd:73:
4a:a8:b1:da:0e:54:ec:3e:57:83:1c:64:b0:0f:11:59:72:73:
7d:38:0d:dc:3c:f9:d2:b8:e7:5d:b6:be:cc:5e:3e:cb:39:1e:
21:f5:57:5d:a0:97:a7:b5:81:68:8d:7d:f7:3c:5e:11:e1:81:
ed:2f:b5:56:5f:ff:60:b1:0a:f5:b1:ea:ff:68:db:1e:92:9d:
c5:d2:fc:fe:fd:30:43:51:8f:2a:25:21:58:74:29:55:25:24:
d4:03:43:7a:2b:1f:ca:91:04:12:7c:b8:22:56:45:95:ae:83:
af:58:13:94:6e:f2:63:59:8d:94:3b:39:11:c9:e2:2c:12:c5:
f9:3e:0f:4d:36:b7:2a:0e:2e:2b:58:83:cc:a5:81:a3:25:ce:
f1:cc:e4:dc:50:6d:85:d2:9b:42:1a:94:13:fc:4a:52:5f:7a:
36:38:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:26 2025 by rpki-client